TCFMAILVAULT

MailVault is the safest way to make contact with journalists and fellows at The Century Foundation. Without revealing your identity, even to us, you may send confidential messages or files. All communications are routed to senior fellow Barton Gellman. No one else will have the keys to read them. At your direction, he will share what you send with a colleague.

MailVault keeps you anonymous by disguising your location and the IP address of your computer. Encryption scrambles the content of your message so that no one can read it in transit.

WHO WE ARE

is a Pulitzer Prize winning reporter and author, now writing about surveillance, privacy and the NSA with documents he received from Edward Snowden.

LEARN MORE

When you enter MailVault, you will receive a unique code name and password. Step by step instructions will guide you after that.

MailVault is based on SecureDrop, a communications system for whistleblowers and others who need to exchange information privately. It uses well-respected, open source tools for anonymity (Tor) and encryption (GPG, also known as OpenPGP). Outside experts have audited and improved the technology, but no system offers perfect security. For example, if someone installs spyware or a hardware key-logger on your computer, your communications with us may be compromised.

If the stakes of anonymity are very high, you may increase your protection against surveillance by browsing to Mail Vault:

(1) from a bootable thumb drive running TAILS, a portable operating system built for maximum privacy...

(2) on a public computer or a computer you use for nothing else...

(3) and connected to a wired or wireless network away from your home and workplace.

PRIVACY POLICY

When you visit the MailVault onion URL, the Century Foundation cannot see your computer's I.P. address. We will not record information about your browser, computer, or operating system, nor will we embed third-party content or deliver cookies to your browser. On this page, tcfmailvault.info, we do not embed any third party content or log I.P. addresses either.

If you send us messages or files, we will make no attempt to identify you without your consent.

Our MailVault servers are kept under lock and key in the physical control of the Century Foundation, segregated from our other computers and networks. We host the system on a Tor "hidden service," which conceals your location and online identity as well as ours. We encrypt all communications from your computer to ours.

All that said, the system is provided on an “as is” basis. We can make no warranty about its security, or yours, and in the end you must assess the risks for yourself.